[jboss-jira] [JBoss JIRA] Assigned: (JBAS-3595) Tomcat allows http access with transport guarantie CONFIDENTIAL
[ http://jira.jboss.com/jira/browse/JBAS-3595?page=all ]
Remy Maucherat reassigned JBAS-3595:
------------------------------------
Assignee: Anil Saldhana (was: Remy Maucherat)
Can you clarify how the new realm hasUserDataPermission method is supposed to work ?
Tomcat allows http access with transport guarantie CONFIDENTIAL
---------------------------------------------------------------
Key: JBAS-3595
URL: http://jira.jboss.com/jira/browse/JBAS-3595
Project: JBoss Application Server
Issue Type: Bug
Security Level: Public(Everyone can see)
Reporter: Thomas Diesler
Assigned To: Anil Saldhana
Fix For: JBossAS-5.0.0.Beta3
Attachments: test.war
The generated web.xml contains CONFIDENTIAL. Access via http:// should be denied.
This woks in Branch_4_0
/home/tdiesler/svn/jbossws/trunk/src/test
[tdiesler@tdvaio test]$ ant -Dtest=org.jboss.test.ws.samples.secureejb.SecureEJBTestCase
one-test
one-test:
[junit] Running org.jboss.test.ws.samples.secureejb.SecureEJBTestCase
[junit] Tests run: 5, Failures: 1, Errors: 0, Time elapsed: 5.452 sec
[junit] Test org.jboss.test.ws.samples.secureejb.SecureEJBTestCase FAILED
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira